$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8440a229-96f8-4a89-b068-a25fe646532e.roa File: 8440a229-96f8-4a89-b068-a25fe646532e.roa (raw, json) Hash identifier: hDF5ULNzhSsZUV8mbs/Z6+DXxfd9Flm2OlL7UFXLf00= Subject key identifier: 4F:6F:04:89:C6:54:38:6F:45:ED:E1:84:80:DF:CD:8C:3B:54:41:31 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5AF26F63AEE27B248BD5ADB82E19457457EE421A Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8440a229-96f8-4a89-b068-a25fe646532e.roa Signing time: Tue 09 Sep 2025 00:10:15 +0000 ROA not before: Tue 09 Sep 2025 00:10:15 +0000 ROA not after: Tue 14 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dab8:b000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Sep 2025 00:50:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:f2:6f:63:ae:e2:7b:24:8b:d5:ad:b8:2e:19:45:74:57:ee:42:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 9 00:10:15 2025 GMT Not After : Oct 14 23:59:59 2025 GMT Subject: serialNumber=9f87ca998cd15acc2937d2a803583b926819850f77aacf3d215b95a468815124, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:50:05:e1:c8:79:96:a6:51:61:50:b9:ab:a2: 75:69:6e:a3:ef:f2:85:61:1a:f9:ae:60:88:90:0c: 52:ee:d9:40:f2:bf:0d:69:8f:c6:17:00:dc:88:2c: c4:4f:c8:bb:08:ba:63:72:ed:8e:c6:ef:53:e4:ba: 75:50:f4:8a:ad:1f:79:77:38:89:2e:ab:77:59:6d: 51:74:ed:37:c6:f5:8b:f0:98:3d:64:78:fd:9b:da: c6:1b:62:3a:6b:34:49:74:f9:ec:c2:c2:9e:07:15: 38:95:d3:8d:d5:67:b5:a0:2e:8b:ba:63:dc:f6:e1: 84:c4:a9:80:8b:a2:8b:98:51:56:21:a8:67:c6:0c: 3f:e3:8a:38:e7:f0:4d:dd:01:8b:86:75:e3:47:54: 27:10:4a:19:28:cd:d2:f6:81:1b:04:e0:d8:12:5b: 24:dd:cd:48:56:13:ef:d6:53:c0:9b:da:94:c8:77: 16:fd:17:d1:84:e5:62:01:a6:7b:48:29:dd:25:9d: da:35:30:68:b0:c3:51:a9:98:8a:81:ae:b5:1e:c7: 2b:69:d1:3e:fd:4d:61:56:80:52:90:be:22:13:87: 44:88:a2:35:cf:cf:2d:06:fc:ac:27:b2:27:2b:40: 57:49:4a:b5:a7:f2:8b:4c:25:07:f9:c7:8d:c4:6c: 23:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:6F:04:89:C6:54:38:6F:45:ED:E1:84:80:DF:CD:8C:3B:54:41:31 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8440a229-96f8-4a89-b068-a25fe646532e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dab8:b000::/40 Signature Algorithm: sha256WithRSAEncryption a7:0b:93:b1:dc:1f:78:6e:21:6f:9d:70:b8:a0:e0:94:96:1f: 8d:74:4f:9f:f1:68:7a:73:9a:4b:64:2b:fe:63:b6:c1:aa:73: d3:8c:2e:97:3f:0f:e4:7d:b7:31:c9:d5:14:5e:5d:66:0b:68: 54:5e:59:e5:ca:10:a5:9a:fd:e7:f1:2a:a1:68:c2:ce:a7:cd: 73:1f:df:0b:72:f0:17:88:83:00:7d:24:39:30:c3:55:ed:84: 66:cc:04:ed:ab:cd:19:39:76:69:d8:3c:46:fa:44:85:78:07: 5e:71:87:54:a3:d0:f5:cd:59:a9:84:f2:66:66:cf:09:15:45: cc:3c:d4:a2:eb:4c:ea:36:84:99:ad:f3:be:82:97:61:91:4a: c2:32:b4:66:d3:a2:53:df:86:48:ee:80:00:16:c4:d2:b5:9e: 56:d8:7a:dc:cd:dd:88:57:00:a1:3b:07:ec:0f:2b:6c:28:a5: e6:99:41:69:9b:69:0f:54:6c:46:86:fd:27:f7:f7:d5:6f:7f: 13:b1:bc:2a:f9:0e:75:8d:8c:f7:6f:04:0e:2a:e6:4b:a3:37: ff:23:8a:b2:34:f1:6e:b2:dd:c1:0c:74:75:70:95:08:49:a3: 1a:ac:56:cf:8e:73:3a:0a:44:41:d0:3a:a8:2b:7a:3d:10:35: d6:b0:57:f9 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUWvJvY67ieySL1a24LhlFdFfuQhowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDkwOTAwMTAxNVoX DTI1MTAxNDIzNTk1OVowejFJMEcGA1UEBRNAOWY4N2NhOTk4Y2QxNWFjYzI5Mzdk MmE4MDM1ODNiOTI2ODE5ODUwZjc3YWFjZjNkMjE1Yjk1YTQ2ODgxNTEyNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylAF4ch5lqZRYVC5q6J1aW6j7/KF YRr5rmCIkAxS7tlA8r8NaY/GFwDciCzET8i7CLpjcu2Oxu9T5Lp1UPSKrR95dziJ Lqt3WW1RdO03xvWL8Jg9ZHj9m9rGG2I6azRJdPnswsKeBxU4ldON1We1oC6LumPc 9uGExKmAi6KLmFFWIahnxgw/44o45/BN3QGLhnXjR1QnEEoZKM3S9oEbBODYElsk 3c1IVhPv1lPAm9qUyHcW/RfRhOViAaZ7SCndJZ3aNTBosMNRqZiKga61HscradE+ /U1hVoBSkL4iE4dEiKI1z88tBvysJ7InK0BXSUq1p/KLTCUH+ceNxGwjtQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFE9vBInGVDhvRe3hhIDfzYw7VEExMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzg0NDBhMjI5LTk2ZjgtNGE4OS1iMDY4LWEyNWZlNjQ2NTMyZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbauLAwDQYJKoZIhvcNAQELBQADggEBAKcLk7HcH3huIW+dcLig 4JSWH410T5/xaHpzmktkK/5jtsGqc9OMLpc/D+R9tzHJ1RReXWYLaFReWeXKEKWa /efxKqFows6nzXMf3wty8BeIgwB9JDkww1XthGbMBO2rzRk5dmnYPEb6RIV4B15x h1Sj0PXNWamE8mZmzwkVRcw81KLrTOo2hJmt876Cl2GRSsIytGbTolPfhkjugAAW xNK1nlbYetzN3YhXAKE7B+wPK2wopeaZQWmbaQ9UbEaG/Sf399VvfxOxvCr5DnWN jPdvBA4q5kujN/8jirI08W6y3cEMdHVwlQhJoxqsVs+OczoKREHQOqgrej0QNdaw V/k= -----END CERTIFICATE-----Generated at Thu Sep 18 16:21:49 2025 by rpki-client